crash-analysis

Analyze crash dumps with debuggers and sanitizers to assess exploitability.

2.9k|469|Updated Mar 4, 2026
One-click install
npx skills add https://github.com/SnailSploit/Claude-Red --skill crash-analysis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: crash-analysis
Source: https://github.com/SnailSploit/Claude-Red/tree/main/Skills/offensive-crash-analysis
Command: npx skills add https://github.com/SnailSploit/Claude-Red --skill crash-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill helps you analyze application crashes, understand their root causes, and determine if they can be exploited, turning debugging into a powerful offensive security tool.

Core Features & Use Cases

  • Crash Triage: Systematically analyze crash dumps using debuggers like WinDbg and GDB.
  • Exploitability Assessment: Identify vulnerabilities by examining registers, memory, and execution flow.
  • Tooling: Leverages sanitizers (ASAN, UBSAN) and specialized debuggers for deep insights.
  • Use Case: When a fuzzer reports a crash in a critical application, use this Skill to dive deep into the crash dump, understand the vulnerability, and assess its exploit potential.

Quick Start

Use the crash-analysis skill to analyze the provided Linux core dump file 'core.dump' using GDB and Pwndbg.

Frequently Asked Questions about crash-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze a crash dump to determine if a vulnerability is exploitable?

To analyze a crash dump for exploitability, examine registers, memory, and execution flow using debuggers like WinDbg and GDB. This systematic crash triage identifies the root cause of software vulnerabilities and assesses their potential for exploit development.

What is the best way to interpret ASAN sanitizer output during crash analysis?

Interpreting ASAN sanitizer output involves reading memory error reports to identify the root cause of crashes. The crash analysis methodology covers interpreting sanitizer outputs like ASAN and MSAN to pinpoint memory corruption and understand vulnerability classes.

Can I use GDB and Pwndbg for Linux core dump crash analysis?

Yes, you can use GDB and Pwndbg for Linux core dump crash analysis. The crash analysis methodology supports both Linux and Windows platforms, leveraging specialized debuggers to dive deep into core dump files and assess exploit potential.

Do I need to understand vulnerability classes before analyzing crash dumps?

Yes, understanding vulnerability classes and debugging principles is required. Analyzing crash dumps and performing exploitability assessment depends on this prerequisite knowledge to correctly identify root causes and evaluate execution flow.

How does WinDbg compare to GDB for Windows crash analysis?

WinDbg is tailored for Windows crash analysis, while GDB with Pwndbg targets Linux core dumps. Both debuggers examine registers and memory to identify vulnerabilities, but the choice depends on the operating system platform of the crash dump.